HELP ! Virus set all my folders on my partitions to be hidden ! HELP !

Lovus · 22 Nov 2012

Please help me !
I searched google on how to fix it but nothing helped me .
I inserted my USB onto my PC .
and when I moved files to my PC it's size became 132KB and converted into an .exe file
I tried to open it and my antivirus detected it to be a Trojan Horse (Win32:VBCrypt-BFB [Trj] - Virus description of avast!

HELP ! Virus set all my folders on my partitions to be hidden ! HELP !-x.png

so I turned off my antivirus and restored the folder (thinking my precious files would be deleted) .
and everytime I open it , it opens in a new window and an error pops up .

HELP ! Virus set all my folders on my partitions to be hidden ! HELP !-y.png

and I turned my antivirus on again and I deleted the exe folders

now I know that it is made by virus and this virus is hiding my folders
I don't know how to reveal it

PS : All my files are accesible through address bar , but I want to open it via double click so please pay attention to my post and help me ( I'am a newbie here and this is my 1st post on forums like this )

Borg 386 · 22 Nov 2012

First off, start by trying to do a system restore, not to the 1st point of infection, but 2 or 3 points back. (Viruses generally embed themselves in the 1st restore point). This may solve the problem although a full system AV scan is recommended even if this seems to solve the problem.

If this does not yield results, try running Windows Defender Offline. Be sure you d/l this on a clean computer, not on the infected one.

Windows Defender Offline

Another option is Norton Power Eraser...be sure to read the doccumentation.

Norton Power Eraser | Free Tool |Easily remove scamware that traditional virus scanning can

Because Norton Power Eraser uses aggressive methods to detect threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully. If you accidently remove a legitimate program, you can run Norton Power Eraser to review past repair sessions and undo them.

Another good program is Malwarebytes. The free version will work well.

http://www.malwarebytes.org/products/malwarebytes_free/

This is listed as a backdoor Trojan, so if you have done any online banking or logged into any site, it may be a good idea to change your passwords on a clean PC.

Lovus · 22 Nov 2012

thanks for your suggestion i'll post back after whatever happens

Lovus · 23 Nov 2012

OK I have 3 partitions .

what I did on my 1st partition ( which is windows 7 os ) - I did a system restore

on my 2nd I reformatted it

and on my 3rd ( Windows 8) - I refreshed it

But before I do all of these , I followed what you said

I did a full system scan using my AV and malwarebytes and deleted all detected threats .

Borg 386 · 23 Nov 2012

Glad you got it sorted. Make sure to keep an eye on your system for suspicious behavior. Viruses generally invite other viruses.

Make sure to run WDO again to double check your system. You may wish to run a scan with TDSSKiller just to be sure you don't have a rootkit.

Anti-rootkit utility TDSSKiller